false, 'error' => t('Tenant not found')]; } if (empty($file) || !isset($file['tmp_name'])) { return ['ok' => false, 'error' => t('No file uploaded')]; } if (($file['error'] ?? UPLOAD_ERR_NO_FILE) !== UPLOAD_ERR_OK) { return ['ok' => false, 'error' => t('Upload failed')]; } if (($file['size'] ?? 0) > self::MAX_SIZE) { return ['ok' => false, 'error' => t('File is too large')]; } $tmpPath = $file['tmp_name']; $mime = self::detectMime($tmpPath); $isSvg = self::imageIsSvgUpload($mime, $tmpPath); $ext = self::imageExtensionForMime($mime, $isSvg); if (!$ext) { return ['ok' => false, 'error' => t('Invalid image file')]; } if ($isSvg && !self::imageIsSafeSvg($tmpPath)) { return ['ok' => false, 'error' => t('Invalid image file')]; } $dir = self::tenantDir($uuid); if (!is_dir($dir) && !mkdir($dir, 0755, true) && !is_dir($dir)) { return ['ok' => false, 'error' => t('Upload failed')]; } self::delete($uuid); $originalPath = $dir . '/original.' . $ext; if (!move_uploaded_file($tmpPath, $originalPath)) { return ['ok' => false, 'error' => t('Upload failed')]; } @chmod($originalPath, 0644); $variantExt = function_exists('imagewebp') ? 'webp' : 'jpg'; if (!$isSvg && self::imageCanResize()) { foreach (self::SIZES as $size) { $target = $dir . '/avatar-' . $size . '.' . $variantExt; self::imageResizeAndFit($originalPath, $target, $size, $size, $variantExt); } } return ['ok' => true, 'path' => $originalPath, 'mime' => $mime]; } public static function detectMime(string $path): string { return self::imageDetectMime($path); } private static function normalizeSize(int $size): int { if (in_array($size, self::SIZES, true)) { return $size; } return self::DEFAULT_SIZE; } private static function findVariantPath(string $dir, int $size): ?string { $matches = glob($dir . '/avatar-' . $size . '.*'); if (!$matches) { return null; } usort($matches, static function ($a, $b) { return filemtime($b) <=> filemtime($a); }); return $matches[0] ?? null; } private static function avatarDirs(string $uuid): array { $dirs = [self::tenantDir($uuid)]; $legacy = self::legacyTenantDir($uuid); if ($legacy !== $dirs[0]) { $dirs[] = $legacy; } return $dirs; } private static function legacyTenantDir(string $uuid): string { return self::storageBase() . '/tenants/' . $uuid; } }